fillter XSS
facebook headly undefined