. Facebook closes cross-site scripting holes - MajorGeeks