finish xss