Fix issue with js injection via chat