Due to media exposure and the large number of vulnerabilities, most Web developers are familiar with the term Cross-Site Scripting (XSS). Many Web developers also have a basic understanding of what XSS is and have taken steps to prevent such vulnerabilities in their own applications. A false understanding can be just as dangerous as no understanding.