add xss-worm