Fix XSS causes