Fixed XSS vulnerability