Fixed XSS vunerability