fix nick xss, chatlog