Ensure [XSS](https://en.wikipedia.org/wiki/Cross-site_scripting) string value
Ensure XSS string value