GET for XSS for manual done