Fixed possible XSS.
Fixed typo.