結果 : how to avoid xss attacks in javascript