Update xss injection