Input Sanitization
Frontend
f.e.
User input never inside the following: JavaScript code CSS Style Code Tag/Attribute Fields HTML Comments DOM.innerHTML DOM.outerHTML document.write() document.writeln() document.domain() html() parseHTML() add() append() prepend() after() insertAfter() before() insertBefore() replaceAll() replaceWith()