Add haoest.js for xss test.