Update xss.js

Missing bracket?!