fix some bugs in reflect xss scanner function