Fix typo in XSS test

Fixed typo in @SamSaffron's recent XSS fix.