Fix xss security in admin panel