Add "05b. State without XSS Protection" for js and jsx.