Cross-Site Scripting Attacks and Prevention