Fixes XSS in misc.php