sanitize project description instead of escaping on input