add xss.py
pbkdf2.py | modify argument order
xss.py | url param
xss.py | url filter
merge xss-escape