foo script src xss mx script x