During the past few months, I have noticed a big misconception when it comes to Cross-site scripting. There is a myth floating around that using the POST method instead of the GET method will eliminate Cross-site scripting or make the vulnerability insignificant...