A detection method for cross-site scripting