fixing the xss problem