XSS fix
Merge remote-tracking branch 'origin/Develop' into Develop