Shinetechs/features/99 xss prevention

Fixed the malicious JavaScript can be run from user's input.