Fixed XSS vulnerability on rating action