stage 2 block stored xss using input validation