revert XSS protection for POST fields as it is already taken care of in Salesforce