fixed an security hole which could allow users to post js code in posts