documented some XSS tricks I've learned at NorthSec