[security] xss service for testing XSS
[security] There is no need to encode quotes