Fix XSS vulnerabilities