Security XSS hole fixes.

Thanks to https://twitter.com/rodrjrc for pointing out some security
holes. Updated screenshot to reflect minor typo fixes as well.