Bug fix.
Added XSS demonstration