[CSSconf.eu 2013] Mike West - XSS. (No, the _other_ "S")