1) HTML is not parsed as strictly as you would expect.
2) The OWASP guide is a good HOWTO.
3) During daily work, ask yourself, "How would I get around this?"
2) The OWASP guide is a good HOWTO.
3) During daily work, ask yourself, "How would I get around this?"