Test xss injection