Fixed raw XSS in helper