Fixed XSS in original_link tag