change xss protection