add additional security around blog search field

removed html tags and force XSS checking on all post data