fixed cross site scripting vulneradility (Bug #52)

fixed cross site scripting vulneradility