Testing Cross-site scripting (XSS)