Which of the following is a practice associated with the security risk known as cross-site scripting (XSS)?