Update select2 usage and fix several xss concerns
Fix xss in project name on stream