Checking input against expected rules.

Cookie with cross-site sending restrictions.

Update fixing a security vulnerability.

Encoding output to prevent interpretation as executable content.

Attack involving forced use of a known session identifier.

Notice describing a security issue or fix.

Removing or neutralizing unsafe input.

Taking control of another user's session.

Identifier system for publicly known vulnerabilities.

Attack involving unintended interpretation of input as commands.