fix possible xss in ja_purity http://www.cvedetails.com/cve/CVE-2012-2413/