XSS, Browser Exploitation Framework, Alice & Bob & Eve & Mallory, Rails & XSS

Cross-Site Scripting - Persistent, Non-Persistent (Reflective)
http://en.wikipedia.org/wiki/Cross-site_scripting

Who are Alice and Bob and Eve and Mallory ?

http://en.wikipedia.org/wiki/Alice_and_Bob

Browser Exploitation Framework
http://en.wikipedia.org/wiki/BeEF_(Browser_Exploitation_Framework)

Rails & XSS:
http://guides.rubyonrails.org/security.html#cross-site-scripting-xss