XSS Follow-up

https://github.com/sakaiproject/3akai-ux/issues/2695