added xss protection and fixed file removal
added extra xss protection