fix xss
Merge branch 'master' into github