Fixed XSS added by previous update