Avoid XSS.