One of the most sneaky uses of JavaScript is cross-site scripting (XSS).look at