title: How to avoid "Cross-Site Script Attacks"
body: <p>How do you avoid cross-site script attacks?</p>
  
  <p><a href="http://en.wikipedia.org/wiki/Cross-site_scripting" rel="noreferrer"><em>Cross-site script attacks</em></a> (or <em>cross-site scripting</em>) is if you for example have a guestbook on your homepage and a client posts some javascript code which fx <strong>redirects you</strong> to another website or sends your cookies in an email to a <em>malicious user</em> or it could be a lot of other stuff which can prove to be real harmful to you and the people visiting your page.</p>
  
  <p>I'm sure it can be done fx. in <a href="http://www.php.net" rel="noreferrer">PHP</a> by <em>validating forms</em> but I'm not experienced enough to fx. ban javascript or other things which can harm you.</p>
  
  <p>I hope you understand my question and that you are able to help me.</p>