people who write XSS attacks suck