protect against html data

Signed-off-by: Doug Hellmann <doug.hellmann@gmail.com>