Fix XSS issue, see Debian Bug #730507