Our Favorite XSS Filters/IDS and how to Attack Them