Update and rename show.php to disableXSS.php