Prevent XSS and CSRF attacks.