StickyMinds.com has just posted an article of mine on the dangers of XSS. (Although they still have my old bio from when I worked at HP, I'll have to get that changed!)