Ref #104 smart-flv XSS added