Tchat feature
Fix XSS vulnerabilities
Remove ent and URIencode, useless for security at the end