adding a simple check on domain name to prevent xss