A Survey on Cross-Site Scripting Attacks