XSS some solution