Fix XSS in timelines select2 fields