removed xss tag