Add a scan policy file of Cross-Site Scripting for OWASP ZAP