Secure by Design Alert: Eliminating Cross-Site Scripting Vulnerabilities