minor input validation
HTML tags