fixed an XSS vulnerability