bugfix XSS Vulnerabilities