XSS signature check improved