[REVIEW] Cross Site Scripting fixes