description xss fix