結果 : how to prevent cross site scripting attack in javascript