The origin of cross-site scripting