Review code for Cross-site scripting