“add xss and homage message”