add config option filter xss