A survey on server-side approaches to securing web applications
XSS-GUARD : Precise Dynamic Prevention of Cross-Site Scripting Attacks