Simplified request now that XSS isn't required