removing found XSS vulnerabilities