Fixing XSS

see http://osvdb.org/show/osvdb/94201
and http://osvdb.org/search?search%5Bvuln_title%5D=concrete5&search%5Btext_type%5D=alltext

probalby more stuff to fix, greets
Merge pull request #1101 from synlag/patch-3

Fixing XSS