fixed XSS on addKey