xss package test