Fix XSS bugs.