More rules for XSS