Update disableXSS.php