UTF-7 XSS fix for extra safety