adds XSS blog post