Add XSS protection