Fix room in. Fix simple XSS by encoding all msg entities