than any other vulnerability type, and such a wide variety of attack manipulations that an
entire book is dedicated to the topic [Fogie]. XSS using the IMG tag is omitted from the
unforgivable category because the developer is more likely to want to support IMG tags,
and less likely to realize that javascript: URIs can be used. Certainly, the novelty and