Fixed XSS leak in register form