Double check that there's no XSS here.