Crude way to kill and XSS in an outdted API