XSS fix in usernotes.
Merge pull request #325 from CelestialWalrus/patch-1

XSS fix in usernotes.