added http header xss testing