Added a test for a JS Injection attack and code to prevent it succeeding.