Reflected XSS vulnerability in saveNotification form fix.