fixed XSS vulnerability

fixed XSS vulnerability escaping pseudo and message text