I like that we've abstracted it out. Should we call it `XSSUtils` instead?