diff --git a/common/components/protocols.js b/common/components/protocols.js
index ef2af7c7..7a7a0090 100644
--- a/common/components/protocols.js
+++ b/common/components/protocols.js
@@ -127,7 +127,7 @@ Liberator.prototype = {
     defaultPort: -1,
     allowPort: function (port, scheme) false,
     protocolFlags: 0
-         | nsIProtocolHandler.URI_LOADABLE_BY_ANYONE
+         | nsIProtocolHandler.URI_IS_UI_RESOURCE
          | nsIProtocolHandler.URI_IS_LOCAL_RESOURCE,
 
     newURI: function (spec, charset, baseURI)
diff --git a/common/content/help.xsl b/common/content/help.xsl
index 628fed6d..3f3452bd 100644
--- a/common/content/help.xsl
+++ b/common/content/help.xsl
@@ -137,7 +137,7 @@
     </xsl:template>
 
     <xsl:template match="liberator:pan[liberator:handle]">
-        <form style="text-align:center" html="http://www.w3.org/1999/xhtml"
+        <form style="text-align:center" xmlns="http://www.w3.org/1999/xhtml"
               action="https://www.paypal.com/cgi-bin/webscr" method="post">
             <input type="hidden" name="cmd" value="_s-xclick"/>
             <input type="image" src="chrome://liberator/content/x-click-but21.gif" border="0" name="submit" alt="Donate with PayPal"/>