Fix some XSS (another lazy hack)