in reply to Web form security

For some very general information about Cross-Site Scripting you might want to check this out. It is not Perl oriented, but may be useful.