QBWEBSAMPLES-22 XSS bug