New XSS strings not working?