MOB-2042 XSS protection

Let's unit test it! :)