Update the param tag to use XSS cleaning on GET/POST values.