update smarty-xss version