Added xss test