fixing cross site scripting vulnerability.