Fixes a few other potential xss entry points and cleans up some legacy webforms files