Revert "Fixed possible XSS." (false alarm)

This reverts commit 147a2bdb4dedaaf723693d888cc2fe3f9c5443d6.