[FIX] Potential XSS