Getting around Chrome POST XSS Protection