Bug paginator xss