diff --git a/package.json b/package.json
index 8a8ab172fb..69ebd9a9fb 100644
--- a/package.json
+++ b/package.json
@@ -63,7 +63,8 @@
     "propagating-hammerjs": "^1.4.0 || ^2.0.0",
     "uuid": "^3.4.0 || ^7.0.0",
     "vis-data": "^6.3.0 || ^7.0.0",
-    "vis-util": "^3.0.0 || ^4.0.0"
+    "vis-util": "^3.0.0 || ^4.0.0",
+    "xss": "^1.0.0"
   },
   "devDependencies": {
     "@babel/core": "7.12.10",
diff --git a/rollup.build.js b/rollup.build.js
index 49fd86ce44..9d156950b3 100644
--- a/rollup.build.js
+++ b/rollup.build.js
@@ -11,7 +11,8 @@ export default generateRollupConfiguration({
     "vis-util": "vis",
     keycharm: "keycharm",
     moment: "moment",
-    uuid: "uuid"
+    uuid: "uuid",
+    xss: "filterXSS",
   },
   header: { name: "vis-timeline and vis-graph2d" },
   libraryFilename: "vis-timeline-graph2d",