fixed possible XSS vulnerability with debug toolbar enabled