Fixed XSS possibility. Closes #33.