enhancement: secure against XSS