add xss protection

Adding in some basic xss protection