Redirecting to Cross site scripting