Fix xss
Limit node name