xssClean function added

Had 4 different contexts, the first 2 alter parts of strings, the last 2
remove those parts
Clean tags from HTTP UA

Users can alter this, causing an XSS