Prevent reflected XSS by sanitizing messages passed as GET params.