LPS-36254 XSS

Iliyan,
Another WYSIWYG XSS related issue. Can you review to make sure I didn't break anything. Thanks.