fix XSS & moderators rules