xss receiver ok