Correct XSS the ghetto fab way