However, even users of those browsers are vulnerable to other XSS attacks, such as those where the malicious code is stored hinein a database. Only correct design of World wide web applications on the server-side can fully prevent XSS. When autocomplete results are available use up and down arrow