Class(sec:CrossSiteScripting complete sec:HTMLScriptInjection) SubClassOf(sec:CrossSiteScripting sec:CodeInjection)