Quassy

The issue concerns a cross-site scripting (XSS) problem. It is related to the use of `add query arg()` and `remove query arg()` functions.