[SECURITY] Fix several XSS issues