add xss
README.md update