ICICIDirect has XSS security flaws - dont address them properly