Strips HTML tags from user input.
Escape client parameters.
Use _.partial instead of deprecated function.