Add nesting to XSS security scrubber