Added XSS to safe and unsafe.php