http://shiflett.org/talks/oscon2003

http://httpd.apache.org/info/css-security/

http://www.cgisecurity.com/articles/xss-faq.shtml

http://www.mricon.com/html/phpfilter.html

http://www.tux.org/~peterw/csrf.txt