updated security rapport to implementation of XSS prevention