Preventing Cross Site Scripting Attacks