Tag:PHP prevents XSS attacks