moved srv_xss.* to service/