XSS and CSRF mitigation, best practices | Hacker News Reader