:bomb: XSS detected :bomb: