patching XSS vulnerabilities lika boss