added xss protection precaution outside of UI.