DEVMINEFI-222: xss problem in blog/forum/comments