Now it's protected against XSS.