Fixed issue #9087: XSS vulnerability