A naive check for external xss attacks