Fix XSS reported by Francisco Alonso @ Red Hat Product Security