Cross-Site Scripting Attacks: What You Need to Know Now