Attempt to fix the XSS

[anantshri]

This is a probable fix for the xss issues.

I am not sure how to test the code hence making it clear this code is not tested as of now. seeking inputs and feedbacks on this.

[github-actions]

CLA Assistant Lite bot:
Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request}

[greenpau]

@anantshri , thank you! Try collaborating with and seek review from the people who raised these:

1. Stored XSS in admin panel triggerable by CSRF caddy-security#273
2. Referer-Based Header XSS caddy-security#267
3. Reflected Cross-Site Scripting caddy-security#264