added skip_xss into the config file