XSS script will ignore <br> tags