A security audit has determined that your web application is vulnerable to a cross site scripting attack. Which of the following measures are appropriate when b...