Thank you Alex for your answer.
About XSS protection, yes, I confirm you that is enabled.
I had a look at thechan library and it looks correct. It would be better if technical indicators are implemented, specially for advanced users, but it is ok.
Thank you Alex, and looking forward for the next patch release, hoping chart axis will display.