fix XSS vulnerability in conversations#new, closes #4010
Merge branch 'hotfix/0.0.3.2'