strip html to prevent linkspam