Removed XSS from functions.php