Yii XSS validation