Enable XSS protection globally