strip tags server and client side to prevent XSS and fix disconnect system message