Browsing: cross site scripting text box