Building with XSS security test