add xss ok comment