Add test for duplicate XSS reporting