Add XSS protection where needed.