There is a link that MS advises to disable client integration feature to prevent cross site scripting
"In the event there is a cross site scripting attack using WebDAV by contributors to a site, a SharePoint administrator can protect their site by disabling all client integration."
I have a little bit confuse the term "contributor" here, does it mean who has contributor right will be able to do the attacking? how about anonymous?
I have a facing internet site which allow anonymous access, should I disable it?
Any ideas would be greatly appreciated.