Fix a security issue with showing message, now It will fillter the message