Try to avoid cross-site scripting issue