Defend against same origin XSS

In response to #195