userCondition.pageSize XSS