Fixes #2 - specify dependencies
Fixes #1 - add some rudimentary XSS protections
Merge pull request #3 from jaredmcdonald/master

Fixes #2 - specify dependencies, fix XSS