mobile optimized and closed off a xss vulerability