Fix XSS in getassertion