Re-added line to allow cross-site scripting