Adding XSS guidelines to readme