fix link xss vulnerabilities
version bump