Added some experimental XSS support as a PoC