input validation is complete for blog model, now to do XSS