Update readme.md

xss remove