Muting XSS fix - and better rewards