Does nopCommerce do anything server-side to prevent attacks from JavaScript that is entered via a topic?