Pro PHP security : from application security principles to the implementation of XSS defensesChris Snyder