Django, unobtrusive JavaScript and cross-site scripting

am wondering if there is a manual/tutorial that talks about advance use of JavaScripting and django, using existing frameworks such as JQuery or Prototype, generating unobtrusive JavaScripting wi开发者_如何转开发th no inline Javascripting.

Another question, is there a place where I can read about cross-site scripting and how I can protect my django project from such a thing?

Regards,

---

I think the Security section of The Django Book will get you started.