fixing XSS