Fix XSS. Oops.