SOS-1963 XSS in notifications
SOS-1963 XSS in so-announcements