block xss on home page rule text

this is the solution we use on the event page when outputting rule text