which of the following must a programmer implement to prevent cross-site scripting aio