Whitepaper called Client Side Security - More Severe Than It Seems. It touches on the darker side of cross site scripting and cross site request forgery along with information on how to protect against these attacks.
2e2efc0a501c46dbd86a6b840919bc3a993394d75adcd695a5ee9268014b3edc