Fix injection vulnerability

From the incorrect assumption that BattleFormats was sanatised
Merge pull request #90 from kotarou3/tournaments

Fix injection vulnerability in tournaments