fixed xss security issue.