How do you treat a name in the request object safely for return to the client?
Anonymous
You need to use something like PHP's html entities to escape anything that could be used as code in the client.
Check out your Company Bowl for anonymous work chats.