Fingent interview question

SQL injection and cross site scripting