UserDetails HTMLInjection Clean