Update xss.js