format_activity_description spec to check ..

escaping of potentially harmful code