Removed code that was injecting unsafe strings into the DOM.