結果 : what is cross site scripting xss and how can it be prevented in web applications