Fix rooms XSS