Posts sent via websockets aren’t sanitized properly