added XSS protection filter in the contact form