get for XSS done.