Ban fake tag <XSS> since its listed in owasp guide