More secure XSLT