Fix XSS in room titles