XSS injection question - Cyber Info