Consequently, they can be used to implement JavaScript insertion attacks against a web client, like a command injection or cross-site scripting. For example ... to read when compared to JSON. HTML is ...