XSS fix.