fixed XSS vulnerable

tags fix