It might be nice to call this useful document something else, though. "XSS prevention summary" or whatever.