- full-time XSS protection (super filter against GPC)
