Object XSS safety toggle