removed allowed_tags POST variable from filterXSS