Check if XSS is handled automatically

[mosbth]

Check if XSS needs extra handling, or if it should be included automatically when resending a form.

[SpaceLenore]

can confirm, needs XSS protection.
I managed to do this with the comment system

Edit: @Aurorabth is on it with a pull request