xssChecker was added
more injection