結果 : what is a primary defense against cross site scripting xss attacks in web applications