todo-list.php cross Protecting from Cross Site Scripting (XSS)