corrected typo in XSS #354

corrected typo in XSS #354