What is cross-site scripting (XSS) and how to prevent from cross-site scripting?