disallow html opening and closing tags