Adding anti-XSS rules from IE.