Fix stored XSS vulnerability in the serverlist