Protect against XSS on main dashboard page

It isn't an interesting commit. It just help me get this app past my security folks.