Hi, @[email protected]!

Have you considered updating to 0.18.2? In the release notes they say that should prevent any not yet discovered XSS (not just the custom emojis), which I think is quite important.