provide real barebones XSS protection on e2ee contents and implement a  few bbcode tags we're likely to see a lot of. Still need to write a js zid() function to properly implement zrl and zmg but at least they will be linked now.