Cross-site scripting essay