Resisting Cross-site Scripting (XSS) is one of the most daunting tasks; web applications usually have many types of vulnerabilities that trigger XSS attacks. It is one of the most common attacks, and it is always featured in the top ten IT security risks.
The bigger the web application, the harder is the task to resist XSS. An attacker sends malicious code in the form of a browser side script, and for that reason it is compulsory to sanitize all the user input fields. In a big web application, such as Google or Facebook, this task is really difficult. ...
