fixes #424 'XSS in multiline input' for complex multiline inputs