In discussing a cross site scripting vulnerability with a friend of mine, he raised a point to me that I couldn't answer...I thought maybe someone here could enlighten me...

To sum up the...