For example, this week, Bootstrap, a UI framework used by somewhere between 15 and 20 percent of all internet sites was impacted by a DOM-based XSS. That's a huge attack surface for any attacker ...

While solutions for preventing server-side XSS are well known, DOM-based Cross-Site Scripting (DOM XSS) is a growing problem. The challenge is that XSS is easy to introduce, but challenging to detect.

Google and Mozilla are working towards a “post-cross-site scripting world” by introducing a number of security features in their browsers.

Online ad industry moves away from once prolific ads that are now deemed insecure because of DOM-based XSS vulnerabilities.