fix possible xss-target

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>