Whenever you're ready, walk me through how you'd approach this.
How would you define and defend against a Cross-Site Scripting (XSS) attack?