And again an xss vector fixed.