XSS fix in name field