HTML injection bug fix