removing xss parameter as requested