cross site scripting vulnerabilities.