title: Securing site against XSS attacks
body: <p>I have an ecommerce site which has to be PCI compliant. The issue I have is that it fails on a XSS attack:</p>
  
  <pre><code>www.mydomain.com?qs=%3c%2fscript%3e%3c script%3ealert(12345)%3c%2fscript%3e
  </code></pre>
  
  <p>Is there a way in .htaccess to strip out any malicious script tags and redirect the user to another page? Or am I barking up the wrong tree?</p>