Changing XSS strategy