Possible XSS Vulnerability in Action Controller