Cross-Site Scripting (XSS): The Vulnerability That Refuses to Die

If you've built a web app that renders any kind of user input (a comment, a username, a search query), you've stood next to XSS. It's one of the oldest vulnerabilities in the book, it's still in the O