Array XSS washes added to core::security