Reviewing code for XSS issues