Add XSS cleanups and more security protections to the admin CONTENTBOX-96 #close