add smarty xss