1.6.13
  -----
  [!] XSS fix (thanks to Nick M)