A comprehensive tutorial on cross-site scripting.

Source : Excess XSS: A comprehensive tutorial on cross-site scripting