99 - PV - XSS prevention - from Pen Test

Fixed the javaScript will execute in messaging & news content.