Fixed some XSS vulnerabilities. Thanks to Contra on github for pointing them out.