clay is idioting himself by a XSS reason