Review Code for Cross-site scripting