Create xss.js

update xss.js