[ALLI-2704] XSS fixes.