SSF-26 Cross-Site Scripting on Manual Metrics