Fix XSS Reflection vulnerability

discovered by Janek Vind <come2waraxe@yahoo.com>.