Cross-site Scripting: Prevention and Security Guide