improved correctness of xss detection (in tags)
one false positive less
new version