remove dups and not-xss