Fixed some cross site scripting.