DOMXSS Filter Based on javascript