fixed pseudo-xss-issue