Fixing another reflected XSS