Code

fix potential XSS hole