How should XSS protection be done? - Supabase