fix at mention in xss.py