Better XSS prevention (NOTE: must run npm install validator on existing installs)