OF-836 Close off XSS issues
OF-836 Close off XSS issues

Still present is the DWR case.

akrherz/Openfire,Gugli/Openfire,speedy01/Openfire,Gugli/Openfire,igniterealtime/Openfire,guusdk/Openfire,guusdk/Openfire,GregDThomas/Openfire,GregDThomas/Openfire,guusdk/Openfire,GregDThomas/Openfire,GregDThomas/Openfire,speedy01/Openfire,igniterealtime/Openfire,speedy01/Openfire,igniterealtime/Openfire,GregDThomas/Openfire,akrherz/Openfire,speedy01/Openfire,Gugli/Openfire,speedy01/Openfire,akrherz/Openfire,Gugli/Openfire,igniterealtime/Openfire,guusdk/Openfire,akrherz/Openfire,guusdk/Openfire,akrherz/Openfire,Gugli/Openfire,igniterealtime/Openfire