ignore more files
fix XSS vulnerability