Add right value to results in XSS check

This fixes the Travis test failures with 1.8.7.

The real root cause, though, is something more mysterious...which may forever remain a mystery because something as little as changing a variable name caused it to go away, so I'm not digging into it any further.