removed XSS sniff and a indentation rule