added xss.js