Added command line flag and appropriate warning to enable XSS vulnerability for demo purposes