Cross-site scripting cheat sheet is now on offsec.tools check it out!