Update XSS Config

automatically prevent cross-site scripting attacks.
Merge pull request #4 from mogetutu/GotToVote-dev

Update XSS Config