How to prevent JavaScript Injection Attacks
<p>Currently I have developed a site which is used for handle financial transactions. I have seen that some of my customers have done JavaScript injection attacks and have done some transactions which are not possible. As a example I have checked his cash balance before he place the order. But some of them did change that by running the following javascript in the address bar. They have taken the varible name by looking in to page source.</p>

<pre><code>javascript:void(document.accounts.cashBalence.value="10000000")
</code></pre>

<p>Since this is critical I want to fixed it quickly. So is there a way to prevent JavaScript injection attacks?</p>
