exchanged xeditable with contenteditable and fixed some xss