ThreadLocal OK + XSS fixed + TagLib for href added