add xss security vulnerability warnings