Community Creators, Secure Your Code! Part II
http://www.alistapart.com/articles/secureyourcode2

Bivald, Niklas
List Apart, A
2006

Abstract:

In part one of this two-part series, we discussed the threat of cross-site scripting in general terms and introduced a number of important security concepts. In part two, we’ll take a more in-depth, hands-on approach: How does an attacker actually exploit the weaknesses found? How can you protect yourself? For reasons of length, we’ll limit our discussion to two specific, representative examples.