xss from weather.. maybe also os?