stop xss in the terms (bug 969141)