Start expanding on XSS and CSRF