Corrected xss