Initial XSS implementation.

Fixes #14