add xss filter, and a rss request