Assertion: website | /r/CapableOf | return malicious javascript
Facets:
Source sentences:
text: XSS involves causing a web site to return malicious JavaScript, while CSRF involves inducing a victim user to perform actions they do not intend to do.