Text this: Cross-site scripting landscape