feature checking for xss in members select2 box