Another XSS fix.