added xss configuration update