Prevent XSS attacks