Getting rid of a remote XSS vulnerability. (Whoops)