Added reflected XSS (secure & insecure)