[pm] unify messaging interface
[pm] prevent xss in pms