Small improvement for -xf-hide-fields to close possible XSS vector.