Did aesthetiful make sure to account for <script>alert("xss")</script> ?