Prevent unescaped user content from getting to the db