moving from block to postcheck
full-time XSS protection (super filter against GPC)

