Cross-site scripting attack instance resolution