Added basic XSS escaping test