alpha for xss-bug