Review my students start-up
int2e: Every* web developer should be familiar with cross-site scripting (XSS) and how to prevent it. http://www.google.com/search?q=xss* If you don't have a login system or any sensitive data, it might not matter much.