Avoid script injection on /register/.