Fixed multiple XSS injection vectors