Fix minor cross site scripting issue