xssClean function added & used by serverMessage

Replaces 5 x based HTML chars