Added XSS documentation