remove xss test