Fix xss filter