drew is responsible for web application security for her company's e-commerce server. she is particularly concerned about xss and sql injection. which technique would be most effective in mitigating these attacks