fixed xss vulnerability