fixed XSS vulnerability (thanks Zerquix18@110b9a3efae31e3815271b89f29959d800f1a13a)