SA #121283 by Matt V: Protect admin form from XSS.