block attempts to inject HTML into the serverlist, this includes many UTF-8 variants of &lt;