adding icons and fixing xss vulnerability in IM