Sony sanitize bootstrap data

Does an escape/unescape around the bootstrapping process to prevent XSS.
Yeah, probably.  Let's brainstorm sets of things to try within the code review discussion