fixed XSS problems in embed and client
Merge pull request #4 from bietiekay/master

fixed XSS problems in embed and client