fix SOJOBO-ADV-13-01

fixes possible Cross Site Scripting in mergedRSS.php