transports: added support for xss filters and IE11 UA

thanks @3rd-eden for bringing up ie11