Prevent XSS in chat message