diff --git a/changelog b/changelog
index ce4e8157..27b6631a 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,7 @@
+Thu Oct 31 18:10 2013 CDT
+    * package.json: Require node-validator < 2.0.0 as a temporary
+      measure while in-house XSS filtering is developed.
+
 Wed Oct 30 19:28 2013 CDT
     * www/assets/js/util.js: Fix mod permission check breaking chat box
       in chat only mode
diff --git a/package.json b/package.json
index c4eeaf70..d6a66922 100644
--- a/package.json
+++ b/package.json
@@ -13,6 +13,6 @@
         "node_hash": "*",
         "bcrypt": "*",
         "nodemailer": "*",
-        "validator": "*"
+        "validator": "<2.0.0"
     }
 }