add xss_aware_join