Tagging: Fix xss bug in tagging.