fixed the xss issue (issue 34) by adding remove_html_markup-function for...

... metadata