XSS: When Your Own Site Runs the Attacker's Code

Cross-site scripting is a strange kind of betrayal. Your site, the one your users trust, turns around...