Same Origin Policy Weaknesses
Examining And Bypassing The IE8 XSS Filter
Web Browsers And Other Mistakes