Extend XSS check to _xx functions family
Closes #33