Get the Whitepaper called Client Side Security – More Severe Than It Seems. It touches on the darker side of cross site scripting and cross site request forgery along with information on how to protect against these attacks.
You can download it from the following link: https://packetstormsecurity.com/files/download/69779/playhack-client.pdf
Source: https://packetstormsecurity.com/files/69779/playhack-client.pdf.html