Browsing: cross site scripting vs cross site request forgery