Can you double check this is XSS proof?