Fixing minor cross site scripting issue