Added xss attack