Fix Composer XSS