indroduced a xss in materials (gift)