Update and rename xss.js to xss.htm