DOCS: we use xss.js and not Google Caja (PR #12866)

The text is out of date as we migrated to xss.js quite some time ago.

GitHub