XSS protection in parsing texts