better xss prevention closes #54
version bumped 0.7.2