updated example
fixed XSS protection