[Add] XSS prevention filter
[Add] escape XML listener