XXS.io website inserts a javascript script to allow easy hacking/testing