This is very useful actually.. I guess it's a stupid question, but is there room for XSS injection then into the actual bot source itself ? Or is that all taken care of already ?

I know you have authorized users and such, but should one get through.

I really like this.