c-icap service library defends Reflected XSS