Fixes security vulnerability

Was fixed before in https://github.com/Versal/highlightr/commit/bb7f92626a68a093ba6d254a865442d9e653c0ba, but this is a bit simpler ;)