diff --git a/composer.json b/composer.json
index 61ec70e..af65aad 100644
--- a/composer.json
+++ b/composer.json
@@ -20,5 +20,8 @@
 			"phpcs -p -s",
 			"minus-x check ."
 		]
+	},
+	"extra": {
+		"phan-taint-check-plugin": "1.3.0"
 	}
 }
diff --git a/includes/TemplateStylesHooks.php b/includes/TemplateStylesHooks.php
index 58587ca..f15d7b6 100644
--- a/includes/TemplateStylesHooks.php
+++ b/includes/TemplateStylesHooks.php
@@ -195,6 +195,7 @@ class TemplateStylesHooks {
 	 * @param Parser $parser
 	 * @param PPFrame $frame
 	 * @return string HTML
+	 * @suppress SecurityCheck-XSS
 	 */
 	public static function handleTag( $text, $params, $parser, $frame ) {
 		global $wgContLang;