Sony sanitize bootstrap data

Does an escape/unescape around the bootstrapping process to prevent XSS.
@kball — do you think more effort can be put into trying to break these methods? We want to be as close to 100% sure of this code as we can (more so than usual :smile: ).