Which of the following is a browser security issue that JavaScript developers should remember when developing a script?