add the message to explain the DOMXSS.