Cross-site scripting (XSS) attacks are BEST prevented through: