Patched XSS bug

I fixed le bugz.