SECURITY: avoid XSS vulnerability within the Tags field in BlogEntry