updated file to newest version of xss
added whitelist of the tags that are allowed