Fix part 1 for XSS issue... call page like this: