Made generated id bind to form, and wrote a test to prove it. Fixed XSS vulnerability in class attribute creation.