fixed multiple xss bugs in widget views.