renponse crosssite scripting
fix comma