starting to apply output escaping
profile page
profile.php updates
profile.php updates