Cross Site Scripting Attacks: Xss Exploits and Defense