Steven Champeon on Web security: XSS, Trust, and Barney.