Added basic xss prevention.