Attempted to fix reflected xss, unconfirmed as working.