cross-site scripting   3 Stories