Added XSS attack