Preventing some more css

I found 3 more spots that are trivially xss exploitable.