Prevent client side injection