Prevent XSS in the data viewer and in error message #149