Fix XSS issue in demo