added url path xss detection, refactored url param functions