Excess XSS: A comprehensive tutorial on cross-site scripting