Fixed XSS security issue