Fixes Resources to always list public and hybrid api
Improves Forms to escape XSS attacks.