Comments: Microsoft releases new tool to counteract cross-site scripting attacks