Recursive XSS protection