Turn off cross site scripting protection