solution xss2