Added prevention for XSS with htmlpurifier.