Basic XSS parsing of output string