added a bug for persistent xss
changes for remode code execution