Fix possible XSS vulnerability in manager