I have a requirement to make an email field supporting all special characters. But while I am giving tes(t)@test.com in email, I am getting "XSSFilter error found" and when I skip the XSS filter for this particular URL it works fine. But what actually XSS filter do?