Cross-protocol, cross-site scripting (XPSS) using HTML forms