Create xss.html