Fixed XSS bugs.