Update XSS Config

automatically prevent cross-site scripting attacks.