Avoid XSS in Plugin-SocketIO