XSS BUG FOUND AND PATCHED

Signed-off-by: DrWhatNoName <drwhat@cryto.net>