Challenges of Cross-site scripting Bypass