[SECURITY] Prevent XSS in scheduler form