Fix XSS.