add default validator for newline and tags to prevent XSS attacks