XSS vulnerabilities aren t getting fixed because they are difficult to fix because they re not easy to fix. Most XSS flaws are straightforward to fix, says author. Buffer overflows were first documented in the early 1970s and began to be exploited heavily in the 1990s. Working to eradicate an entire vulnerability class is a noble endeavor, but it s not remotely pragmatic for businesses to wait around for it to happen. We can bite off chunks through OS, API, and framework protections, but XSS or any other vulnerability class isn’t going to disappear completely any time soon.
Source: https://threatpost.com/squashing-ants-dynamics-xss-remediation-092810/74521/