xss prevention

Issue #6 new