restrict html and body tags.