XSS change