update to address xss issue