Create noXSS.php

Really. That's all.