As a means to make HTML documents more interactive and dynamic, many browsers support client-side scripting languages and embedded applications. While these features can be very useful, they can also make users vulnerable to wide variety of attacks.
