ColdFusion Cross Site Scripting Defender