fixes an issue that allows posting notifications containing links with cross-site scripting attack Signed-off-by: Heikki Hellgren <heikki.hellgren@op.fi>