Understanding XSS – input sanitisation semantics and output encoding contexts
troyhunt.com