Defend Your Web Apps from Cross-Site Scripting (XSS)