XSS remediation