Protect your Web site from cross-site scripting attacks

Cross-site scripting (XSS) attacks, a method by which attackers embed HTML scripts either in Web postings (stored XSS) or input fields on a Web site (reflected XSS), are gaining popularity, most likely due to the relative ease with which they can be executed on unwitting victims. You can assess the vulnerability of your Web site using the Open Web Application Security Project's WebGoat utility. This download explains how attackers use XSS and how you can protect yourself from cross-site scripting.

Have you had to fend off cross-site scripting attacks on your Web site?