added xss_filter helper