Reflected XSS fix.