XSS vuln

Fix xss vulnerability