Fix xss.