applications represent the most common avenue for users, customers, and attackers to access data, which means you must build the software to enforce the security policy and to ensure compliance with regulations, including the privacy and integrity of both data and system processes. regardless of the development model, the application must validate all input. certain attacks can take advantage of weak validation. one such attack provides script code that causes a trusted user who views the input script to send malicious commands to a web server. what is this called?