Security researcher Haoxi Tan breaks down the best practices and tools for finding the different types of XSS vulnerabilities.