add forbidHtmlText middleware method