creating web folder
adding cross site scripting doc