“Web 2.0 has enabled a broad array of Websites to be more
engaging for users. It has also enabled a new and now very common
attack, namely cross site scripting, commonly referred to as XSS
attacks.“Mozilla is aiming to put an end to XSS attacks in its upcoming
Firefox 3 browser. The Alpha 7 development release includes support
for a new W3C working draft specification that is intended is
secure XML over HTTP requests (often referred to as XHR) which are
often the culprit when it comes to XSS attacks. XHR is the backbone
of Web 2.0 enabling a more dynamic web experience with remote
data…”
Related Link:
ONLamp: This Blog is Susceptible to Persistent Cross Site Scripting
(XSS)