diff --git a/FAQ.md b/FAQ.md
index 978cb71710..2d9a98e83c 100644
--- a/FAQ.md
+++ b/FAQ.md
@@ -4997,6 +4997,8 @@ With a sufficiently long/complex password, which is communicated to the recipien
The maximum message text is 1,500 characters, which includes HTML formatting tags.
+Cross-site scripting (XSS) is prevented by using [DOMPurify](https://github.com/cure53/DOMPurify) (Apache License Version 2.0).
+
This feature is available since version 1.1985. This feature is not available in the Play store version of the app.
Sending protected text is a pro feature, decrypting protected text is a free feature.
diff --git a/decrypt/index.html b/decrypt/index.html
index 81913d52c2..c24144bf5b 100644
--- a/decrypt/index.html
+++ b/decrypt/index.html
@@ -11,7 +11,7 @@
-
+
+
+
+