Prevented js injection on client and server-side for tinymce inputs