aolle fix: potential NPE in the stored XSS assignment