PCDATA - parsed character data whicewhich means the data entered will be parsed by the parser.
CDATA - the data entered between CDATA elements will not be parsed by the parser.that is the text inside the cdataCDATA section will be ignored by the parser. as a result a malicious user can sent destroying data to the application using these cdataCDATA elements.
cdataCDATA section starts with "<![cdata[" and<![CDATA[ and ends with "]]>" ]]>.
The only string that cannotcannot occur in cdata is ]]>CDATA is ]]>.
The only reason why we use cdataCDATA is: text like javascriptJavascript code contains lot of <<, & characters. To avoid errors, script code can be defined as cdataCDATA, because using << alone will generate an error, as parser interprets it as the start of new element. similarly &Similarly & can be interpreted as a start of the charatercharacter entity by the parser.