Close the four medium security gaps in desk v2

Fixed four medium-severity issues in desk v2: email frame innerHTML injection, unsafe field access from chat frames, unsafe sidebar actions, and unvalidated user code.