Sony sanitize bootstrap data

Does an escape/unescape around the bootstrapping process to prevent XSS.
Oops this is a legacy of the master and not relevant in this branch.  Will remove