add XSS samples