Revert "Turned on global xss filtering"

This reverts commit 5f94c9fda049ca46855bac2483d209246ad38384.