Adding XSS protection