add xss filter to the title