fixed style and minor XSS vulnerabilities