Added url option to xss_contentstealer.php for grabbing SOP urls over AJAX