Working with Cross-site Scripting Match Conditions