Preventing JavaScript code from running by removing from the page source at runtime
<p>Somebody entered XSS code in my friend's site. It inserts <code>&lt;script&gt;alert(0)&lt;/script&gt;</code> in the page source. You can see it <a href="http://technoflexusdatastreamapi.appspot.com/listData" rel="nofollow">here</a>.</p>

<p>Is there a way to remove this from the page at runtime, to prevent it from being executed?</p>

<p>He has a presentation on it tomorrow and he has no access to database to remove it.</p>
