Fixed XSS in environment panel. Sending requests which were not URL encoded resulted in XSS.