modified xss.js