Fixed minor XSS issue in messages