fixing xss, fixes #566
Merge pull request #567 from dxa4481/master

fixing xss, fixes #566