Fix xss vulnerability in example chat app