The Cross-Site Scripting Framework