ugh, stop another xss. also, re-word rules
put emojis and things into titles, too
escape author names, too