add public api for XSS