Sean Wei
says to
YSITD
像是 script img 等 tag 都要防範