fix mistake in previous "fix"
Merge pull request #50 from ccd0/master

Oops - fix XSS introduced in last version
Release 2.40.36