Removed useless comments. Added a simple XSS prevention mechanism.