Fixed a XSS exploit in the language selector.