refactor xss protection