added xss test-encoder