sanitize output in serializer

anything else could be trusted on frontend
strip text before creating a prop