DEFMINEFI-222: xss problems in blog/forum/comments