xss not support better use jdflasher