XSS fully functional