Fixed cross site scripting issue