Internet Explorer 8 features

Cross-site scripting attacks try to exploit vulnerabilities in the websites you visit. In a cross-site scripting attack, you might receive an email that contains a tampered website address. Once you click the link, you are directed to a legitimate website that has been compromised to contain malicious content that can capture keystrokes and record your login and password. These attacks have emerged as a leading online threat. Internet Explorer 8 includes Cross-Site Scripting (XSS) Filter, which can detect these types of attacks and disable the harmful scripts. XSS Filter is turned on by default to help protect you.

Internet Explorer 8 detects potential cross-site scripting vulnerabilities and disables harmful scripts