Removed xss 'protection'.