Fixing XSS

see http://osvdb.org/show/osvdb/94201
and http://osvdb.org/search?search%5Bvuln_title%5D=concrete5&search%5Btext_type%5D=alltext

probalby more stuff to fix, greets