If you are interested in staying abreast of the latest in the art (?) of cross-site scripting and general javascript-based attacks, GNUCITIZEN is one of the best and deserves a place on your weekly reading list.