Re-enabled XSS vulnerability