title: Server side message data security
body: <p>What is the best way to sanitize message content on the server side which is received from client as one of the query string parameters? This message is also meant to be resend to other connected clients so it have be secure in terms of code execution or injection (JavaScript or HTML) on server or client side.</p>