Another issue that we have to be aware of is the potential for sessionstealing and cross site scripting (XSS).

• 另一个问题是，我们必须警惕会话窃取和跨站脚本攻击(XSS)的可能性。