Make attack links ajaxy

Fix hints on StoredXSS