Taking control of the user's browser using XSS