Fixed bug #14402: XSS in Install tool (thanks to Benjamin Mack)