Text this: Secure coding in cross site scripting