Prevent cross-site scripting.