fix Website should be protected against XSSVulnerability