Adding cross script protection for post text field