init.g XSS challenges