Great progress on Chat - needs XSS prevention