Tag inputs now sanitized for XSS protection