Fixed XSS attack problem