FORUM-839: Failed to open Private Message when User Name contains illegal XPath characters

Fix description:
	- Escape illegal Xpath in profile path
FORUM-751: XSS with bbcode tag which support attribute like size, color, url