filter XSS for id part