Dom XSS issue fixed