make sure that this can't be XSS'd