4) Despite popular opinion that XSS is easily prevented, it has
many subtleties and variants. Even solid applications can have
flaws in them; consider non-standard browser behaviors that try
to ‘fix’ malformed HTML, which might slip by a filter that uses