A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vuln...