Security You don’t need the lt and gt tags to have a successful cross-site scripting (XSS) vulnerability