Fix XSS tests