[SECURITY] XSS in install tool