JAVASCRIPT INJECTION: An attacker can send specially crafted requests to the server, in order to have it embed malicious code in the HTML response. Sometimes, bad requests can be put into innocent looking page links, luring unwitting users to interact with a hacked version of the page they are visiting.