updated README
added Cross Site Scripting (XSS) protection