Cross site script protection is implemented. Amending TODO.