Avoid Malicious JavaScript in Lists