Ditto XSS issue.