AIU this feature is SSS, not XSS, so XSS protections don't apply.