Implement XSS prevention for calls to _