description cosmetic fix; xss preventing ecplained