Morgan Stanley Interview Question

Cross-site Scripting, SQL joints and Security policies?