- Security: close cross site scripting vulnerability in draft, compose