BC-1065 fixed issues with XSS in admin app