added new xss vector