Fixed xss vulnerability in text list