Fixed XSS attack possibility