How to fight scripting attacks