Understanding and Preventing XSS Attacks in JavaScript Applications

One malicious string in the wrong text box, and an attacker is running code inside your users’ browsers, on your domain,