shutting up lint.

i don't care about cross-site scripting.