add xss tester