Fix XSS Reflection vulnerability