added an input filter for some xss protection but not 100% secure :octocat: