add validate post create XSS