Fixed Issue with XSS injection.

closes #1