How a CISO should deal with XSS?
medium.com