Fix XSS Reflection vulnerability

discovered by Elar Lang <elarlang@gmail.com>.