Fixes major security exploit regarding JavaScript injection.